Immunity Canvas: BLACKICE

Name| blackice ---|--- CVE| CVE-2004-0362 Exploit Pack| CANVAS Description| BlackIce Stack Overflow Notes| CVE Name: CVE-2004-0362 VENDOR: ISS Notes: This is the exploit that the Witty worm used. Try it a couple times if it doens't work initially. Repeatability: This is a one shot exploit. CVE Ur...

Immunity Canvas: SNMPXDMID

Name| snmpXdmid ---|--- CVE| CVE-2001-0236 Exploit Pack| CANVAS Description| snmpXdmid Buffer Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F26981&zone32=category%3Asecurity%20snmpXdmid CVE Name: CVE-2001-0236 VENDOR: Sun Development Notes: This is a one sho...

Immunity Canvas: ADOBE_FLASH_OTF_PARSING

Name| adobeflashotfparsing ---|--- CVE| CVE-2012-1535 Exploit Pack| CANVAS Description| adobeflashotfparsing Notes| CVE Name: CVE-2012-1535 VENDOR: Adobe Notes: This exploit takes advantage of a integer overflow that leads to a heap based buffer overflow. The kerntable contains an integer that wh...

Immunity Canvas: MS12_004

Name| ms12004 ---|--- CVE| CVE-2012-0003 Exploit Pack| CANVAS Description| MS12004 Notes| CVE Name: CVE-2012-0003 VENDOR: Microsoft NOTES: This exploit will work on Internet Explorer 8. Repeatability: Single References: http://technet.microsoft.com/en-us/security/bulletin/ms12-004 CVE Url:...

Immunity Canvas: ACROBAT_TTF_SING

Name| acrobatttfsing ---|--- CVE| CVE-2010-2883 Exploit Pack| CANVAS Description| Acrobat Reader TTF Bug Notes| CVE Name: CVE-2010-2883 Notes: VersionsAffected: Acrobat Reader = 9.3.4 Repeatability: References: http://contagiodump.blogspot.com/2010/09/cve-david-leadbetters-one-point-lesson.html...

Immunity Canvas: QUICKTEAM_RFI

Name| quickteamrfi ---|--- CVE| CVE-2009-1551 Exploit Pack| CANVAS Description| QuickTeam Remote File Include Notes| CVE Name: CVE-2009-1551 VENDOR: quickteam Repeatability: Infinite CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-1551 References: 'http://osvdb.org/show/osvdb/54217'...

Immunity Canvas: PHPSKELSITE_RFI

Name| phpskelsiterfi ---|--- CVE| CVE-2009-0595 Exploit Pack| CANVAS Description| PHPSkelSite Remote File Include Notes| CVSS: 5.1 Repeatability: Infinite VENDOR: Skelsite CVE Url: https://vulners.com/cve/CVE-2009-0595 CVE Name: CVE-2009-0595...

Immunity Canvas: COPPERMINE

Name| coppermine ---|--- CVE| CVE-2008-0506 Exploit Pack| CANVAS Description| coppermine Notes| CVE Name: CVE-2008-0506 VENDOR: Coppermine URL: http://www.milw0rm.com/exploits/5019 Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2008-0506 CVSS: 6.8...

Immunity Canvas: LSHTTPD_DISC

Name| lshttpddisc ---|--- CVE| CVE-2007-5654 Exploit Pack| CANVAS Description| Litespeed HTTPD file disclosure Notes| CVSS: 5.0 Repeatability: Infinite VENDOR: LiteSpeed Technologies CVE Url: https://vulners.com/cve/CVE-2007-5654 CVE Name: CVE-2007-5654...

Immunity Canvas: JOOMLAFLASHUP_INCLUDE

Name| joomlaflashupinclude ---|--- CVE| CVE-2007-5457 Exploit Pack| CANVAS Description| Joomla FlashUploader Component Remote File Inclusion Notes| CVE Name: CVE-2007-5457 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/2886 CVE Url:...

Immunity Canvas: QT_RTSP

Name| qtrtsp ---|--- CVE| CVE-2007-0015 Exploit Pack| CANVAS Description| Apple QuickTime rtsp URL Handler Overflow Notes| CVE Name: CVE-2007-0015 VENDOR: Apple VersionsAffected: Repeatability: References: http://projects.info-pull.com/moab/MOAB-01-01-2007.html CVE Url:...

Immunity Canvas: MS05_040

Name| ms05040 ---|--- CVE| CVE-2005-0058 Exploit Pack| CANVAS Description| Windows Telephony Service Overflow Notes| CVE Name: CVE-2005-0058 VENDOR: Microsoft MSADV: MS05-040 MSRC: http://www.microsoft.com/technet/security/Bulletin/MS05-040.mspx Platforms Tested: Windows XP Home/Pro SP1a up2date,...

Immunity Canvas: IPLANET_CHUNKED

Name| iplanetchunked ---|--- CVE| CVE-2002-0845 Exploit Pack| CANVAS Description| iPlanet Chunked Encoding Notes| References: http://www.sun.com/service/sunone/software/alerts/transferencodingalert-23july2002.html http://www.eeye.com/html/Research/Advisories/AD20020808a.html CVE Name: CVE-2002-08...

Immunity Canvas: ADOBE_FLASH_ID3

Name| adobeflashid3 ---|--- CVE| CVE-2015-5560 Exploit Pack| CANVAS Description| adobeflashid3 Notes| CVE Name: CVE-2015-5560 VENDOR: Adobe Notes: This module exploits a mishandling of large integers during the decoding of an ID3 tag. This situation leads to an integer overflow that eventually...

Immunity Canvas: JOOMLA_MM_RCE

Name| joomlammrce ---|--- CVE| CVE-2013-5576 Exploit Pack| CANVAS Description| joomlammrce Notes| Repeatability: Infinite Notes: This module was tested in a Joomla 3.1.4 on Windows 7. Depending on the configuration of the site this module may require valid credentials in order to exploit the file...

Immunity Canvas: CVE_2011_1485

Name| CVE20111485 ---|--- CVE| CVE-2011-1485 Exploit Pack| CANVAS Description| CVE-2011-1485: pkexec stuid race Notes| CVE Name: CVE-2011-1485 VENDOR: PolKit Notes: Tested on Red Hat Enterprise Linux 6 Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2011-1485 NOTES:...

Immunity Canvas: PHPAUCTION_INCLUDE

Name| phpauctioninclude ---|--- CVE| CVE-2008-1416 Exploit Pack| CANVAS Description| PHPauction GPL 2.51 Remote File include Notes| CVE Name: CVE-2008-1416 VENDOR: phpauction.net Repeatability: Infinite References: http://securityreason.com/exploitalert/3558 CVE Url:...

Immunity Canvas: PBD_INCLUDE

Name| pbdinclude ---|--- CVE| CVE-2007-4313 Exploit Pack| CANVAS Description| Php Blue Dragon CMS Remote Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpbluedragon.pl CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4313 CVE Name: CVE-2007-4313...

Immunity Canvas: JOOMLA_EVAL

Name| joomlaeval ---|--- CVE| CVE-2007-4187 Exploit Pack| CANVAS Description| joomlaeval Notes| CVE Name: CVE-2007-4187 VENDOR: Joomla Repeatability: Infinite References: 'http://www.milw0rm.com/exploits/4212',...

Immunity Canvas: WINPCAP

Name| winpcap ---|--- CVE| CVE-2007-3681 Exploit Pack| CANVAS Description| winpcap Notes| CVE Name: CVE-2007-3681 VENDOR: WinPcap.org URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550 Notes: This exploit will auto-target based on reading a kernel file on Windows 2000 o...

Immunity Canvas: OTE_INCLUDE

Name| oteinclude ---|--- CVE| CVE-2007-2676 Exploit Pack| CANVAS Description| Open Translation Engine OTE 0.7.8 Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Ote CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2676 CVE Name: CVE-2007-2676...

Immunity Canvas: ANI_CURSOR

Name| anicursor ---|--- CVE| CVE-2007-0038 Exploit Pack| CANVAS Description| Windows Animated Cursor Overflow MS07-017 Notes| References: http://www.determina.com/security.research/vulnerabilities/ani-header.html CVE Name: CVE-2007-0038 VENDOR: Microsoft MSADV: MS07-017 VersionsAffected:...

Immunity Canvas: CITRIX_PP

Name| citrixpp ---|--- CVE| CVE-2007-0444 Exploit Pack| CANVAS Description| Citrix MetaFrame XP Print Provider Overflow Notes| CVE Name: CVE-2007-0444 VENDOR: Citrix Notes: Platforms Tested: References: http://www.zerodayinitiative.com/advisories/ZDI-07-006.html CVE Url:...

Immunity Canvas: FILECOPA

Name| filecopa ---|--- CVE| CVE-2006-3726 Exploit Pack| CANVAS Description| filecopa Notes| CVSS: 6.5 Repeatability: One shot VENDOR: Novell CVE Url: https://vulners.com/cve/CVE-2006-3726 CVE Name: CVE-2006-3726...

Immunity Canvas: MS04_045

Name| ms04045 ---|--- CVE| CVE-2004-0567 Exploit Pack| CANVAS Description| WINS Name Validation Stack Overflow Notes| CVE Name: CVE-2004-0567 VENDOR: Microsoft MSADV: MS04-045 VersionsAffected: Repeatability: One shot References: http://www.microsoft.com/technet/security/Bulletin/MS04-045.mspx CV...

Immunity Canvas: ABYSS

Name| abyss ---|--- CVE| CVE-2003-1337 Exploit Pack| CANVAS Description| abyss Notes| References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0235.html CVE Name: CVE-2003-1337 VENDOR: Aprelium Notes: None Date public: 06/29/03 CERT Advisory: None CVE Url:...

Immunity Canvas: MSXEXCH50

Name| msxexch50 ---|--- CVE| CVE-2003-0714 Exploit Pack| CANVAS Description| MS Exchange 2000 XEXCH50 integer overflow ms03-046 Notes| CVE Name: CVE-2003-0714 VENDOR: Microsoft MSADV: MS03-046 MSRC: http://www.microsoft.com/technet/security/bulletin/ms03-046.asp NOTE: CVE Url:...

Immunity Canvas: OSX_ROOTPIPE2

Name| osxrootpipe2 ---|--- CVE| CVE-2015-3673 Exploit Pack| CANVAS Description| OS X XPC Admin Framework rootpipe 2 local privilege escalation Notes| CVE Name: CVE-2015-3673 VENDOR: Apple Notes: Rootpipe 2 for Mac OS X 10.10.3 Repeatability: Multiple Times References:...

Immunity Canvas: IE_EXECCOMMAND

Name| ieexecCommand ---|--- CVE| CVE-2012-4969 Exploit Pack| CANVAS Description| ieexecCommand Notes| CVE Name: CVE-2012-4969 VENDOR: Microsoft Notes: VersionsAffected: Repeatability: Infinite References: 'http://technet.microsoft.com/en-us/security/advisory/2757760' Date public: 09/17/2012 MSADV...

Immunity Canvas: EMC_NETWORKERFS

Name| emcnetworkerFS ---|--- CVE| CVE-2012-2288 Exploit Pack| CANVAS Description| EMC Networker format string exploitation Notes| CVE Name: CVE-2012-2288 VENDOR: Notes: http://blog.exodusintel.com/2012/08/29/when-wrapping-it-up-goes-wrong/ Tested on Windows Server 2003 Standard Edition...

Immunity Canvas: CVE_2011_0997

Name| CVE20110997 ---|--- CVE| CVE-2011-0997 Exploit Pack| CANVAS Description| CVE20110997 DHClient Exploit Notes| CVE Name: CVE-2011-0997 NOTES: -This exploit answers dhcp requests with crafted packets to get commands executed by scripts using the hostname. For this exploit to work, the target...

Immunity Canvas: SUGARCRM_FILEUPLOAD

Name| sugarcrmfileupload ---|--- CVE| CVE-2009-2146 Exploit Pack| CANVAS Description| sugarcrmfileupload Notes| CVE Name: CVE-2009-2146 VENDOR: http://www.sugarcrm.com Notes: Tested on SugarCRM 5.2.0c. This exploits needs a valid username and password for SugarCRM to exploit as the vulnerability...

Immunity Canvas: STRAWBERRY_LFI

Name| strawberrylfi ---|--- CVE| CVE-2009-1774 Exploit Pack| CANVAS Description| Strawberry 1.1.1 Local File Include Notes| References: 'http://osvdb.org/show/osvdb/54721' Repeatability: Infinite VENDOR: StrawBerry CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-1774 CVE Name:...

Immunity Canvas: SYMANTEC_IAO

Name| symanteciao ---|--- CVE| CVE-2009-1430 Exploit Pack| CANVAS Description| Symantec Alert Management System 2 Overflow Notes| CVE Name: CVE-2009-1430 VENDOR: Symantec VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-09-018/ CVE Url:...

Immunity Canvas: OPENREALTY_EXEC

Name| openrealtyexec ---|--- CVE| CVE-2007-5056 Exploit Pack| CANVAS Description| Open-Realty = 2.4.3 Remote Code Execution Notes| CVE Name: CVE-2007-5056 VENDOR: Open-realty.org Repeatability: Infinite References: http://securityreason.com/exploitalert/3360 CVE Url:...

Immunity Canvas: JOOMLASLIDESHOW_INCLUDE

Name| joomlaslideshowinclude ---|--- CVE| CVE-2007-5065 Exploit Pack| CANVAS Description| Joomla Slideshow Component Remote File Inclusion Notes| CVE Name: CVE-2007-5065 VENDOR: Joomla Repeatability: Infinite References: http://www.securityfocus.com/bid/25760/exploit CVE Url:...

Immunity Canvas: WEBED_INCLUDE

Name| webedinclude ---|--- CVE| CVE-2007-4815 Exploit Pack| CANVAS Description| WebEd Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: ed-engine CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4815 CVE Name: CVE-2007-4815...

Immunity Canvas: ANYINVENTORY_INCLUDE

Name| anyinventoryinclude ---|--- CVE| CVE-2007-4744 Exploit Pack| CANVAS Description| AnyInventory = 2.0 Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Ramapo.edu CVE Url: https://vulners.com/cve/CVE-2007-4744 CVE Name: CVE-2007-4744...

Immunity Canvas: ENETMAN_INCLUDE

Name| enetmaninclude ---|--- CVE| CVE-2007-4712 Exploit Pack| CANVAS Description| eNetman Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: eNetman CVE Url: https://vulners.com/cve/CVE-2007-4712 CVE Name: CVE-2007-4712...

Immunity Canvas: TM_SPROTECTAGENT

Name| tmsprotectagent ---|--- CVE| CVE-2007-2508 Exploit Pack| CANVAS Description| Trend Micro ServerProtect Agent RPC Overflow Notes| CVE Name: CVE-2007-2508 VENDOR: Trend Micro Notes: Platforms Tested: References: http://www.tippingpoint.com/security/advisories/TSRT-07-025.html CVE Url:...

Immunity Canvas: DDE_CLOSEHANDLE_LPE

Name| ddeclosehandlelpe ---|--- CVE| CVE-2019-0803 Exploit Pack| CANVAS Description| ddeclosehandlelpe Notes| CVE Name: CVE-2019-0803 Notes: Tested: - Windows 7 x64 - Windows 10 x64 1703 VENDOR: Microsoft CVE Url: https://nvd.nist.gov/vuln/detail/CVE-2019-0803 CVSS: 7.8...

Immunity Canvas: OSX_STICKYKEYSFREE

Name| osxstickykeysfree ---|--- CVE| CVE-2014-4405 Exploit Pack| CANVAS Description| IOHIKeyboardMapper::stickyKeysfree local privilege escalation Notes| CVE Name: CVE-2014-4405 VENDOR: Apple Notes: Tested on: - 10.9 - 10.9.1 - 10.9.2 - 10.9.3 - 10.9.4 - 10.9.5 Repeatability: Multiple Times...

Immunity Canvas: CVE_2011_3176

Name| CVE20113176 ---|--- CVE| CVE-2011-3176 Exploit Pack| CANVAS Description| Novell ZENworks Configuration Management 0x4c Buffer Overflow Notes| CVE Name: CVE-2011-3176 VENDOR: Novell Notes: Tested on ZenWork Configuration Managment 10 SP3 on Windows Server 2003 SP1 This exploit should work an...

Immunity Canvas: CVE_2010_1807

Name| CVE20101807 ---|--- CVE| CVE-2010-1807 Exploit Pack| CANVAS Description| Android 2.0/2.1 webkit parsefloat Notes| CVE Name: CVE-2010-1807 VENDOR: Google Repeatability: Infinite client side - no crash References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1807 CVE Url:...

Immunity Canvas: TRENDMICRO_SETOWNED

Name| trendmicrosetowned ---|--- CVE| CVE-2010-3189 Exploit Pack| CANVAS Description| trendmicrosetowned Notes| CVE Name: CVE-2010-3189 VENDOR: Trend Micro Notes: abyssec 0day VersionsAffected: Last Repeatability: Infinite References: 'None' CVE Url: https://vulners.com/cve/CVE-2010-3189 Date...

Immunity Canvas: FIREFOX_35

Name| firefox35 ---|--- CVE| CVE-2009-2477 Exploit Pack| CANVAS Description| Firefox 3.5 Remote Code Execution Notes| CVE Name: CVE-2009-2477 VENDOR: Mozilla Notes: Although the advisories states that this due to improper handling of and tags, this exploit uses another method to reach the...

Immunity Canvas: FOXITLAUNCHIT

Name| FoxitLaunchit ---|--- CVE| CVE-2009-0836 Exploit Pack| CANVAS Description| FoxitLaunchit Notes| CVE Name: CVE-2009-0836 VENDOR: Foxit Software Notes: VersionsAffected: Foxit Reader 3.0.2009 1301, 3.0 and 2.3 Repeatability: Infinite CVE URL: https://vulners.com/cve/CVE-2009-0836 References:...

Immunity Canvas: WORKSIMPLE_RFI

Name| worksimplerfi ---|--- CVE| CVE-2008-5764 Exploit Pack| CANVAS Description| WorkSimple Remote File Include Notes| CVSS: 9.3 Repeatability: Infinite VENDOR: WorkSimple CVE Url: https://vulners.com/cve/CVE-2008-5764 CVE Name: CVE-2008-5764...

Immunity Canvas: GROUPE_INCLUDE

Name| groupeinclude ---|--- CVE| CVE-2008-1074 Exploit Pack| CANVAS Description| GROUP-E 1.6.41 remote file include Notes| CVE Name: CVE-2008-1074 VENDOR: Group-E Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/groupe-rfi.txt.html CVE Url:...

Immunity Canvas: QT73_RTSP

Name| qt73rtsp ---|--- CVE| CVE-2007-6166 Exploit Pack| CANVAS Description| QuickTime 7.3 RTSP Buffer Overflow Notes| CVE Name: CVE-2007-6166 VENDOR: Apple Repeatability: Infinite client side - no crash CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6166 Date public: 11/23/20...